Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32332d3233203d3e20323632343835.roa
File:                     3137372e36362e322e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          DSkHtGwOFDeDRFVDT8zgfQ0J/BVQ5UivofCe54f/bXE=
Subject key identifier:   36:AB:A4:3F:93:90:E9:E6:AF:00:86:18:5C:9D:38:21:3F:5D:61:17
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       4CFFB6327F053BE41BDAD1B3D3EC5BC66634F4E2
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:25 +0000
ROA not before:           Sat 27 Jul 2024 21:08:25 +0000
ROA not after:            Sat 26 Jul 2025 21:13:25 +0000
asID:                     262485
IP address blocks:        177.66.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 01:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ff:b6:32:7f:05:3b:e4:1b:da:d1:b3:d3:ec:5b:c6:66:34:f4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:25 2024 GMT
            Not After : Jul 26 21:13:25 2025 GMT
        Subject: CN=36ABA43F9390E9E6AF0086185C9D38213F5D6117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:a1:c9:9e:22:61:9d:c9:c0:49:18:cf:ff:
                    ad:b5:ab:b5:f4:18:98:0a:db:6e:30:c2:cb:16:5e:
                    0a:42:04:ec:2a:f5:00:7d:49:f7:83:7f:f3:b8:41:
                    1f:6b:43:2e:39:00:7e:eb:b7:23:92:c1:f5:2b:bf:
                    40:99:5c:0a:8c:94:ed:3b:6f:c3:7a:a3:6a:b8:d5:
                    97:66:d4:8c:bd:7f:fe:c9:39:0f:61:91:da:71:fa:
                    16:d5:ba:29:76:95:c6:b1:ce:0a:b8:e5:2d:08:4a:
                    91:5f:f7:03:09:d5:66:2e:28:af:2f:24:8e:eb:c7:
                    eb:52:19:bf:14:77:43:6c:08:ff:7d:41:e3:14:83:
                    9b:42:17:93:e1:a0:a3:4d:2d:6a:49:7c:72:81:28:
                    31:0b:a9:90:6e:a0:ed:a2:a3:8d:85:28:9d:48:90:
                    58:81:b1:15:7b:a0:cb:83:b8:59:53:45:87:77:52:
                    fd:49:75:63:9f:09:27:e0:5d:94:a9:b7:55:48:1f:
                    63:64:94:fe:03:d1:4a:83:c2:a8:d5:97:4f:15:35:
                    20:a8:1c:69:a5:06:c7:aa:3a:92:bc:e6:36:cc:c6:
                    53:36:fe:14:3e:36:38:3f:1d:47:5c:a9:fc:ec:ae:
                    b7:2d:ec:fe:28:b5:49:7c:06:4d:ea:ac:b6:c2:87:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AB:A4:3F:93:90:E9:E6:AF:00:86:18:5C:9D:38:21:3F:5D:61:17
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:5f:a0:06:b8:e4:3b:1a:07:31:25:fc:57:1f:0a:14:e6:
         ec:14:1e:9c:22:27:e4:8f:db:ab:b1:e4:13:96:fd:ef:a7:37:
         ee:96:f2:a4:30:db:ee:b1:61:9a:32:d8:b1:a1:25:b6:e2:57:
         7c:32:34:d7:18:f8:85:29:98:99:86:8c:a7:20:c5:30:55:aa:
         2c:39:7e:dc:b6:19:1c:57:96:47:79:f1:06:d3:38:a7:9c:11:
         02:4e:df:f5:bf:b8:a4:58:a7:84:bd:62:79:c4:ae:1c:55:b3:
         41:ba:f3:64:2d:9d:dd:fd:75:28:9e:e7:b4:1c:5b:c9:70:15:
         ee:4f:a1:86:27:6e:28:7b:6f:fa:59:3f:f1:36:85:fd:61:c9:
         2b:0d:30:a3:3e:4b:3b:ae:61:d0:64:22:a5:72:14:02:2a:17:
         49:17:1a:1c:71:11:fa:96:21:c9:d7:f6:4e:1b:ca:93:03:27:
         aa:99:19:a3:11:f3:41:5c:b3:d7:89:93:21:0e:84:29:96:4e:
         c2:72:c0:9d:f3:8a:91:cb:9f:b3:1a:60:00:69:f3:e9:cc:32:
         0f:48:6e:f6:5e:f1:0a:19:b3:d9:95:56:26:15:77:d3:88:44:
         59:8b:9e:e2:ba:db:81:01:84:12:ed:c9:7e:85:aa:8d:2d:55:
         45:e0:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 03:39:06 2024 by rpki-client on console-fra.rpki-client.org